Add device authorization grant (device code flow - rfc 8628)#1539

Open

duzumaki wants to merge 37 commits intodjango-oauth:masterfrom

duzumaki:add-device-flow

Commits on Aug 13, 2025

Add Device model

duzumaki
authored and
cristiprg
committed
Adhere content-type request header to CGI standard

duzumaki
authored and
cristiprg
committed
Add create device authorization response method

duzumaki
authored and
cristiprg
committed
Update the grant type mapping to recognize device code

duzumaki
authored and
cristiprg
committed
Devices that are public should not need basic auth

duzumaki
authored and
cristiprg
committed
Add device settings

duzumaki
authored and
cristiprg
committed
Create device authorization view

duzumaki
authored and
cristiprg
committed
Ensure we import in the views module

duzumaki
authored and
cristiprg
committed
Migrations

duzumaki
authored and
cristiprg
committed
Add initial stage test

duzumaki
authored and
cristiprg
committed
Temp commit: Point oauthlib to master

duzumaki
authored and
cristiprg
committed
Add device poll change test

duzumaki
authored and
cristiprg
committed
Add incorrect client id test

duzumaki
authored and
cristiprg
committed
Update authors and changelog

duzumaki
authored and
cristiprg
committed
Add the device user code form

duzumaki
authored and
cristiprg
committed
Add approve deny form

duzumaki
authored and
cristiprg
committed
Update request body validator

duzumaki
authored and
cristiprg
committed
Update device imports

duzumaki
authored and
cristiprg
committed
Update token endpoint

duzumaki
authored and
cristiprg
committed
Prep the tests: Create user_code_generator util

duzumaki
authored and
cristiprg
committed
Add user code generator to main settings

duzumaki
authored and
cristiprg
committed
Add tests to test the whole flow

duzumaki
authored and
cristiprg
committed
Update idp requirements

duzumaki
authored and
cristiprg
committed
Add tutotial doc

duzumaki
authored and
cristiprg
committed
Update idp requirements

duzumaki
authored and
cristiprg
committed
Ensure the django user sets the oauthlib request user

duzumaki
authored and
cristiprg
committed
Ensure device token errors are returning 400

duzumaki
authored and
cristiprg
committed
Add device code to refresh token mapping

duzumaki
authored and
cristiprg
committed
chore: address documentation notes

dopry
authored and
cristiprg
committed
chore: add more details to the tutorial docs
cristiprg
committed
fix: addressed comments; enhanced preconditions and responses of views
cristiprg
committed
Use term DeviceGrant over Device
cristiprg
committed
test: add missing unit test for user_code_generator
cristiprg
committed
Use latest oauthlib 3.3.0
cristiprg
committed
Use class based views to make them more easily extensible
cristiprg
committed
Bugfix: handle missing client_id
cristiprg
committed

Commits on Aug 14, 2025

Increase test coverage
cristiprg
committed